Neptune Exploit Kit Used to Deliver Monero Miner

  • 22 August 2017
  • 1 reply
  • 2 views

Userlevel 7
Badge +54
By Eduard Kovacs on August 22, 2017 Cybercriminals have been using the Neptune exploit kit to deliver cryptocurrency miners via malvertising campaigns, FireEye reported on Tuesday.
 
Neptune, whose arrival was detailed by researchers in January, is also known as Terror, Blaze and Eris. It was initially considered a variant of the Sundown exploit kit due to many code similarities.
 
Exploit kit activity has been declining since the disappearance of Angler and Neutrino. Sundown also went silent and the infosec community managed to delivered a significant blow to the infrastructure used by RIG.
 
Full Article.

1 reply

Userlevel 7
Update to Monero Miner
=============================================================================
by Chris Brook A cryptocurrency miner surfaced on the world’s largest torrenting site for a day over the weekend, raising the ire of users unaware the tool was there, let alone leveraging their machine’s computing power.
Users noticed the miner Friday night on The Pirate Bay, a site that acts as a treasure trove of links to torrents, mostly illegal.
One user said on Reddit he had a feeling something was awry two days ago after observing his CPU threads spike to 80 and 85 percent upon navigating the site. Another user said on the site’s forum that he scoured the site’s HTML and stumbled upon Coin Hive code for a JavaScript miner, embedded in a page’s script.
Coin Hive lets companies monetize traffic by embedding a miner for Monero—an anonymous, untraceable cryptocurrency that’s enjoyed rampant popularity over the past several months—in a site’s code.
The company cautions sites against deploying its code without notifying their users, something it appears The Pirate Bay is guilty of.
 
full article here:

Reply